What’s Vulnerable › Vulnerabilities

CVE-2017-17309

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-06-14 · updated 2026-06-17
• Weakness: CWE-22

Description

Huawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient validation of the received HTTP requests, a remote attacker may access the local files on the device without authentication.

Affected products

• Huawei Technologies Co., Ltd. HG255s-10: v100r001c163b025sp02

References

• http://packetstormsecurity.com/files/155954/Huawei-HG255-Directory-Traversal.html
• http://www.huawei.com/en/psirt/security-notices/2017/huawei-sn-20170911-01-hg255s-en
• http://packetstormsecurity.com/files/155954/Huawei-HG255-Directory-Traversal.html
• http://www.huawei.com/en/psirt/security-notices/2017/huawei-sn-20170911-01-hg255s-en

Get alerted when CVE-2017-17309 or the next vulnerability affects your stack